Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39392e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e39392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          QjnjtugWAMT+gsI1ePD8aopWqAcGGyK46yOgSKd+Now=
Subject key identifier:   24:75:DE:0C:5F:D9:40:70:11:05:6F:47:1F:BC:9D:1A:19:59:0A:56
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2083C8B2B386F95F69E467244E77923F82B961EE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:15 +0000
ROA not before:           Wed 29 Sep 2021 23:56:15 +0000
ROA not after:            Fri 30 Sep 2022 00:01:15 +0000
asID:                     17451
IP address blocks:        117.102.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:83:c8:b2:b3:86:f9:5f:69:e4:67:24:4e:77:92:3f:82:b9:61:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:15 2021 GMT
            Not After : Sep 30 00:01:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:b2:ba:24:52:b5:ee:32:62:d5:4f:e9:d0:
                    5e:69:5e:c6:af:42:d5:8d:cb:0f:23:e9:b6:41:19:
                    88:c9:dc:af:ef:c6:81:c5:68:ac:fc:61:c8:73:66:
                    ba:06:98:06:51:8c:38:66:06:62:be:2d:05:1b:25:
                    62:dd:a7:3e:79:38:e7:c2:42:66:b5:1d:e6:4d:62:
                    f5:29:a5:de:bb:86:85:81:fe:a8:83:71:9d:a6:38:
                    95:a7:30:c3:38:31:fd:46:c7:60:b4:a9:d1:37:37:
                    2f:69:0c:4d:bf:96:5d:04:1f:ca:ca:ac:87:13:5f:
                    cf:ea:e8:ab:ee:11:c1:c0:2c:aa:8e:3a:97:b5:a7:
                    2b:c9:fa:14:d4:90:33:b0:46:27:12:39:9e:84:dd:
                    ef:fd:3e:cb:3b:c0:6f:d4:01:4a:f3:e7:34:cc:7f:
                    12:1d:66:43:25:0a:c2:3d:c0:15:7d:86:ee:29:ff:
                    e0:87:28:c7:88:a5:be:cc:b9:8c:c9:f9:85:0b:57:
                    19:d4:9a:0f:54:ce:3c:8e:d2:2b:20:24:a3:35:e4:
                    e3:32:8d:fd:86:e1:0b:9a:c4:21:e0:6c:c9:1d:bf:
                    54:48:73:2c:6b:73:37:14:18:7f:62:02:41:f4:7f:
                    10:b9:4a:ec:c3:56:6e:e6:a7:e7:ff:2c:4c:e8:5d:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:75:DE:0C:5F:D9:40:70:11:05:6F:47:1F:BC:9D:1A:19:59:0A:56
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:34:a6:e2:30:9b:b3:16:1d:81:c0:e1:81:86:38:a0:ad:5c:
         e1:d6:f2:23:eb:91:9d:ae:6d:c8:e6:2a:6a:90:d2:5a:fe:7b:
         44:6e:1d:11:f9:f0:97:e0:ee:37:68:ad:21:35:d9:c6:a2:a0:
         3f:65:9d:9d:db:03:dd:35:8d:15:7d:be:34:d1:48:2d:7c:3b:
         c0:bb:a0:6d:10:b1:1a:1e:c2:ae:06:1b:31:74:f5:fb:97:e4:
         e5:19:f7:69:3e:b3:d2:be:0c:fb:43:94:27:a4:4f:8a:fb:38:
         a3:9d:6a:cc:f1:55:5e:2e:b7:65:56:cf:9b:89:1e:1b:f3:b7:
         d8:db:10:65:3c:ce:a8:db:24:70:8c:12:7c:6c:a1:3d:ee:9d:
         77:cd:c3:9e:fb:af:d8:cf:b1:87:2e:06:83:2f:4c:5e:ec:b3:
         6b:3e:ea:3c:c7:45:c4:41:45:ad:02:25:b5:10:ed:54:de:68:
         0b:73:1a:61:8e:b9:72:00:cf:99:db:e0:ac:c2:cc:cc:fe:0c:
         00:15:66:26:36:bc:7c:46:25:0b:df:11:8d:4f:76:f7:98:3e:
         b9:3f:8e:f0:94:09:c6:be:e8:d3:24:44:f1:b7:b8:33:d4:01:
         49:a2:00:0a:29:3c:2d:a9:9e:c1:51:20:04:62:74:9c:91:9b:
         79:d5:a0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----